WillItSurvive
Cybersecurity companies · United States

Keyfactor

Software that manages digital certificates and machine identities across clouds and devices.

Hard to displace
Assessed 21 July 2026 · Evidence as of 21 July 2026
Strong structural protection; the business model survives ai pressure.
On the recordSince 21 July 2026 · Checkable from June 2026 · Every call on the record Checkpoint: White House post-quantum cryptography executive order deadlines drive federal PKI demand
The call

Keyfactor sits between certificate-issuing giants and cloud platforms that cannot easily copy its neutral position, with CyberArk as the one competitor actually built to challenge it.

Keyfactor is a software company that helps large enterprises manage digital certificates (the security keys that keep data safe) across multiple cloud providers like AWS and Azure at the same time. It is hard to copy because the big certificate companies like DigiCert and Sectigo would have to work against their own business if they tried to build the same thing, and the cloud giants cannot do it without hurting their own products. The one thing that could change everything is CyberArk/Venafi, a well-funded competitor that is trying to bundle certificate management into a bigger identity product and could start winning customers away from Keyfactor if they execute well.

Why
01
AI pressure: None apparent. Keyfactor is issuing certificates to AI agents themselves, treating agentic AI as new demand rather than a threat to its business. Could AI do the core job? Unlikely.
02
Bigger players: DigiCert, AWS, Azure, CyberArk (Venafi). CA owners and cloud giants sell their own certificate tools, but going cross-vendor would undercut their own products. CyberArk is the one unblocked rival. Could a giant copy it? No, they are blocked.
03
What protects it. Its neutral, cross-vendor position lets it manage certificates from any cloud or CA, something DigiCert and hyperscalers cannot do without hurting their own sales.
What would change this call
CyberArk/Venafi announces Fortune 500 machine-identity wins taken from Keyfactor. Would show the one credible peer is converting its platform bundle into real share loss.
Keyfactor's integration of InfoSec Global and CipherInsights shows measurable customer attrition or delay. Would show 2025 acquisitions are execution risks rather than moat additions.
DigiCert or AppViewX wins publicized agentic-AI certificate management bake-offs against Keyfactor. Would show rivals' AI/PQC marketing is translating into actual customer switches.
Key numbers
  • Over $200M ARR, ~120% net retention (May 2025)
  • $1B+ growth round led by Summit Partners (Jul 2026)
  • Ranked #1 enterprise PKI vendor by ABI Research (Nov 2025)
Named risks
  • CyberArk/Venafi bundling machine identity into broader identity platform to take share. Severity: high
  • Integration execution failure on InfoSec Global and CipherInsights acquisitions closed May 2025. Severity: medium
  • DigiCert's agentic-AI CLM features commoditizing routine certificate automation. Severity: medium
  • Customer and revenue figures vary widely across third-party data vendors, clouding true scale. Severity: low
Rivals, as read in July 2026
RivalDirectionEvidence
CyberArk (Venafi)contestingWell-funded direct machine-identity rival, benchmarked head-to-head with Keyfactor as of May 2026
DigiCertcontestingMarkets agentic-AI CLM features on DigiCert ONE; ranked behind Keyfactor by ABI Research Nov 18, 2025
EntrustcontestingNamed second market leader after Keyfactor in ABI Research's Nov 18, 2025 PKI vendor ranking
Sectigolosing toExcluded from ABI Research's top-three PKI market leaders in Nov 18, 2025 ranking behind Keyfactor
Questions people ask
Is Keyfactor profitable in 2026?
Keyfactor has not disclosed profitability, but reported building on $200 million in annual recurring revenue with about 120% net retention as of May 13, 2025, and raised over $1 billion in growth investment led by Summit Partners on July 6, 2026, signaling strong revenue momentum rather than confirmed profit.
Who owns Keyfactor?
Keyfactor is privately held. As of July 6, 2026, Summit Partners led a $1 billion plus strategic growth investment, with existing backers Insight Partners and Sixth Street Growth retaining significant ownership stakes; Sixth Street first invested in October 2023 at a roughly $1.3 billion valuation.
Who is Keyfactor's biggest competitor?
CyberArk, via its Venafi acquisition, is Keyfactor's most direct machine-identity rival with comparable funding and platform breadth. DigiCert and Entrust also compete closely; ABI Research's November 18, 2025 ranking placed Keyfactor first, with Entrust and DigiCert as the next two market leaders.
Could AI replace Keyfactor's certificate management business?
Unlikely outright: PKI certificate issuance is a regulated, liability-bearing root-of-trust function requiring HSM integration and compliance credentials like FedRAMP Moderate, granted to Keyfactor's government offering on May 20, 2026. AI is instead becoming a customer, with Keyfactor issuing X.509 certificates to AI agents via Anthropic's MCP as of November 17, 2025.
What is Keyfactor's valuation?
Keyfactor was valued at approximately $1.3 billion enterprise value after Sixth Street Growth's minority investment on October 24, 2023. A new $1 billion plus strategic growth investment led by Summit Partners closed July 6, 2026, with Sixth Street's Alex Katz stating the company has more than doubled in size since 2023.
Does Keyfactor support AI agent identity management?
Yes. As of November 17, 2025, Keyfactor issues cryptographically verifiable X.509 certificates to AI agents for non-human identity, integrating with Anthropic's Model Context Protocol, and positions its platform as trust infrastructure for AI and machines, per its 2026 corporate messaging.
Timeline
  • 2026-07-06Announced $1B+ strategic growth investment led by Summit Partners
  • 2026-05-20Keyfactor for Government CLAaaS received FedRAMP Moderate authorization
  • 2026-01-29Published research finding two-thirds of firms see AI agents as bigger risk than humans
  • 2025-11-19Named to Deloitte Fast 500 for sixth consecutive year, citing 210% 3yr growth
  • 2025-11-18Ranked #1 enterprise PKI vendor by ABI Research
  • 2025-11-17Detailed PKI-based identity issuance for agentic AI via MCP integration
  • 2025-05-13Acquired InfoSec Global and CipherInsights, reported $200M ARR and 120% NRR
  • 2024-02-13Exceeded $100M ARR in under five years, cited 525% three-year growth
  • 2023-10-24Sixth Street Growth minority investment valued company at ~$1.3B
  • 2021Merged with Sweden's PrimeKey, gaining EJBCA open-source CA engine
Revision history
21 July 2026
First assessed. Hard to displace. The text above is fixed as of this date and is not edited afterwards.
In the same band
Sources